General Privacy Notice of Hotel Tarobá
Introduction
Hotel Tarobá, aware of the importance of privacy and the protection of the personal data of its guests and users, establishes this General Privacy Notice in accordance with the General Data Protection Law (LGPD, Law No. 13.709/2018). This document is intended to inform you, the data subject, about how your data is collected, used, shared and stored by our institution.
Applicability of Data Protection Legislation
At Hotel Tarobá, we strictly respect applicable data protection laws, ensuring that the processing of our guests' personal data is conducted in a secure and transparent manner.
1. Data Processing in Brazil:
As established by Article 3 of the General Data Protection Law (LGPD), Brazilian legislation will apply to all personal data collected and stored in national territory, regardless of the nationality or domicile of the data subject. The LGPD applies to any data processing operation carried out in Brazil, covering the collection, use, access and storage of personal information. We are committed to protecting and respecting the rights of data subjects as provided for in the LGPD.
2. Data Processing Outside Brazil:
In cases where data collection and storage are carried out outside Brazil, we will apply the legislation relevant to the place of processing:
a) United States: For guests and users accessing our services from the United States, we apply specific laws such as the California Consumer Privacy Act (CCPA) and other relevant state laws, depending on the guest’s state of residence. These laws regulate the collection, use and protection of personal data, providing specific rights regarding access, deletion and transparency.
b) Spain (European Union): For guests and users in Spain, data processing is subject to the General Data Protection Regulation (GDPR). The GDPR provides a robust framework for the protection of personal data, including extensive rights such as access, correction, deletion of data and opposition to processing. The Organic Law on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) complements the GDPR, offering additional guidelines specific to Spain.
c) Collection of Cookies and Website Data: For the collection of data through cookies and other tracking technologies on our website, we adhere to the applicable local laws of users, ensuring transparency and control over the collection and use of this information. Users will be informed and will have the option to consent or decline the use of cookies, in accordance with the consent practices required by each relevant jurisdiction.
We prioritize that international transfers of personal data are carried out in compliance with applicable laws and only to countries that provide an adequate level of data protection or under specific guarantees, such as standard contractual clauses.
Data collect
1. WE USE THE DATA COLLECTED FOR THE PURPOSE OF:
Manage reservations and accommodations;
Improve the quality of our services;
Carry out marketing and advertising actions, in accordance with the specific consent of the data subject;
Comply with legal and regulatory obligations.
The personal data collected by Hotel Tarobá includes, but is not limited to, name, email, telephone number, address, personal document data such as ID and CPF, and sensitive data necessary for the provision of our services. The collection occurs both through digital channels, such as our website and social networks, and in person, at the time of check-in or during the provision of services.
Use of Data
2. WHAT DATA DO WE USE?
We collect information that you provide directly, such as name, email, telephone number, as well as data on the use of our website through cookies and similar technologies, see our [Cookie Policy](https://www.hoteltaroba.com.br/politica-de-cookies), pixel tags, beacons and local shared objects, which are used for the purpose of improving the Holder's browsing experience on the Services, according to their habits and preferences.
The following personal data is used:
A. Data Collected Through Banner and WhatsApp:
Username (if provided for support via WhatsApp).
Telephone number (used for communication via WhatsApp).
Personal information voluntarily provided during the WhatsApp conversation, including booking preferences and specific details requested by the guest.
B. Data Collected During Online Booking:
Not me complete.
Email address (for login and communication).
Password (for creating and accessing the user account).
Social login details, such as Facebook or Google credentials (if you choose the social login option).
Any other personal information provided during the booking process.
C. Data Collected in the Desbravador System (presumably a hotel management system):
Authentication information such as login and password.
Data provided during check-in or other stages of the service provided by the system.
D. Data Collected through the Contact Form:
First name.
Email address.
Cell phone number.
Message (any personal data that may be included in the user's message).
E. Data Collected through the Blog and Comments on Social Networks:
Username (which may be a pseudonym depending on the platform).
Comments posted on the blog and on linked social media platforms (Facebook, Twitter, Pinterest, LinkedIn).
IP address (usually collected by default by social media platforms and blogs for moderation and security purposes).
F. Cookies and Tracking Technologies:
Preferences and website usage data, collected through cookies and similar technologies (as mentioned at the bottom of the image), which may include browsing data, language choices, location, and interactions with the website.
G. Data Collected by Desbravador / Booking:
In order to provide experience and transparency when contacting the person interested in booking accommodation, it will be necessary to verify the number of rooms and vacancies available, information for budgeting purposes as well as reservations, thus ensuring availability and updating of the capacity and prices charged by the HOTEL. Data collected essentially for the purpose of filling out the Date, number of guests (adult and child). If you are interested for permission and management purposes in the system, it will be necessary to identify First Name, Last Name, Nationality, Date of Birth, Gender, Address, Contact, Telephone Number.
2.1. Privacy of Minors
We do not intentionally collect information from minors without the consent of their parents or legal guardians. Images, videos and audio may be captured and used for internal and social media purposes, and the legal guardian may not authorize or express such consent. In addition, it is important to emphasize that:
– Minors may actively engage in the creation and sharing of content on social media platforms, including the capture of audio, video and images within the hotel premises. These activities must always take place under the supervision of a responsible adult and in compliance with applicable privacy policies.
– Any content generated internally without authorization that includes promotion or advertising, and that involves minors, may have consequences according to the policies of social networks and current legislation on child advertising.
– Unauthorized captures for the purposes mentioned or similar will have consequences, including early termination of the stay, without the right to compensation from the adult responsible for the minor staying. Such actions do not exempt liability for damages caused by non-compliance with hotel policies.
Data Sharing
3. PERSONAL DATA MAY BE SHARED WITH:
Tarobá Group companies, for commercial and administrative operations purposes;
Suppliers and partners who assist us in providing services, such as reservation management companies and payment systems;
Government authorities or other third parties, when required by law or to protect the hotel's legal rights.
Data Security
We adopt appropriate security measures to protect data against unauthorized access, improper changes or destruction. However, it is important to highlight that no security measure can be compromised, in which we seek and go through improvement processes that involve the security of guests, especially information.
Data Subject Rights
4. YOU HAVE THE RIGHT TO:
– Access your personal data;
– Correct incomplete, inaccurate or outdated data;
– Delete your personal data, except when Hotel Tarobá has legal grounds to keep them;
– Limit the use of your data;
– Revoke your consent at any time, without affecting the lawfulness of the processing that was carried out based on the previous consent.
To exercise these rights, you can contact us via email atendimento@hoteltaroba.com.br ,
Data Retention
We keep your personal data for as long as necessary to fulfill the purposes for which it was collected, respecting the retention period determined by applicable legislation.
Policy Changes
This General Privacy Notice may be updated periodically to reflect changes in our privacy practices. We will notify you of significant changes via our website or by contacting you directly.
5. CONTACT
If you have any questions about this Notice or Hotel Tarobá's data protection practices, please contact us via email at atendimento@hoteltaroba.com.br.
Thank you for choosing Hotel Tarobá and we are committed to protecting your privacy and personal data.
Partner Privacy Policy:
1 – DESBRAVADOR > Management System https://www.desbravador.com.br/politica-de-privacidade ;
2 – BOOKING > Reservation and promotions system https://www.booking.com/content/privacy.pt-br.html?aid=2311236&label=pt-br-booking-desktop-9_uvqir24qvA6x6xGiDvCQS652796015463%3Apl%3Ata%3Ap1%3Ap2%3Aac%3Aap%3Aneg%3Afi%3Atikwd-65526620%3Alp1001632%3Ali%3Adec%3Adm&sid=e0958e841390510ef87051c7ec217a03
3 – Omnibess Reserva e Plataforma de Pagamento > https://omnibees.com/politica-de-privacidade/?_gl=1*bvmkiw*_gcl_aw*R0NMLjE3MTUxMDgwMDQuQ2p3S0NBandvdWV4QmhBdUVpd0F0V19aeDkxWG5GSzVPUzNjb1lTeVAzc2RkTWxHd0R2OHJwLUFmNGdNdU1iX1BpT1E4eFc5bHJkTXhob0NEVVFRQXZEX0J3RQ..*_gcl_au*NjM1MTUzNjMxLjE3MTE2MzY1ODMuNDUwNzUxMzM0LjE3MTUxMDc4NDEuMTcxNTEwODE4OA..*_ga*Mzk3NDIxMTIuMTcxMTYzNjU4Mw..*_ga_RYVVP35WTQ*MTcxNTExMDU2MC4zLjAuMTcxNTExMDU2MC4wLjAuMA..
4 – Keepo (Instragram mini site) > https://www.keepo.bio/privacy
APPOINTMENT OF PERSONAL DATA CONTROLLER IS MANDATORY
The Data Controller, also known as Data Protection Officer (DPO), will act as a communication channel between Hotel Tarobá (Controller), Data Subjects (Customers, Employees and Third Parties) and the National Data Protection Authority (ANPD).
Law No. 13.709/2018 – LGPD provides that all companies must have a Data Protection Officer, whose duties are mentioned in paragraph 2 of article 41.
Personal Data Officer: Mauro Sebastiany
Contact: atendimento@hoteltaroba.com.br
